Examining future priorities for cyber security management

Transcription

1 Examining future priorities for cyber security management Cybersecurity Focus Day Insurance Telematics 16 Andrew Miller Chief Technical Officer

2 Thatcham Research Owned by the major UK Motor Insurers with a board of senior insurer executives Established in 1969, it now has 180 employees, mainly engineers and researchers, who are experts in vehicle safety, testing and repair influencing the design of vehicles to reduce accidents, improve safety & security, thereby driving down claims costs

3 Cybersecurity The internet comes to vehicles: Connectivity: internet access, an internal network (often wireless) to other connected devices installed or carried in the vehicle; external wireless capability for vehicle to vehicle (V2V) communication Vehicle communication to help accident prevention; inform of unseen road hazards; and generally to deliver other road relevant intelligence; and vehicle to infrastructure (V2I) connectivity. Smart Cities = integrated mobility infrastructure built on large scale deployment of connected vehicles and existing vehicles retrofitted with aftermarket connectivity Uber. By 2020, Frost & Sullivan expects 85% of vehicles to be connected to the Internet Cybersecurity is a system approach: Ubiquitously connectivity creates cybersecurity risk. Cybersecurity assurance can only be considered within the broad landscape of the complete wireless communications networks that support connected vehicles.

4 Cybersecurity Its not just telephones: Any communication system which has a digital connection to the vehicle: radio througham,fm,dab,in car Wifi, Bluetooth, light through cameras and other sensors, ultrasound through perimeter sensing, alarms etc. The same threat can also provide a solution: over the air (OTA) update. OBD attack: On Board Diagnostic vulnerability is already well known, and assessment standards developed by Thatcham Research promote vehicle manufacturer containment actions. However, this vulnerability will not reduce in the short term. Increasing complexity creates new vulnerabilities: Each new generation of vehicle has increasing electrical/electronic complexity, and each component and digital system is a potential vulnerability. It has to be designed in from the start. If its digital, it s a vulnerability if it s connected, it s a remote opportunity.

5 Cybersecurity Automated, connected vehicles and cybersecurity: A malicious agent would be able to cause all vehicles of a particular type with the same software to take an action which would result in a crash. No easy fix: McAfee: auto manufacturers could implement a distributed security architecture, exhibiting defence in depth, analogous to the layers of protection analysis (LOPA) methodology used for safety and risk reduction. Demonstrating hacks: IET: we find that it is possible to bypass rudimentary network security protections within the car, such as maliciously bridging between our car s two internal subnets. Unknown unknowns: Within the vehicle space it is extremely difficult to predict how and where an attack may come old ways of approaching security will not work in the future. McAfee unknown unknowns D. Rumsfeld

6 Cybersecurity Collaboration is key: US: home of many of the major digital system providers has set up 24 Information Sharing and Analysis Centers (ISACs), covering everything from automotive to financial services to real estate. UK: National Centre for Cyber Security (NCSC) which will co ordinate the activities of the current government cybersecurity initiatives. Cybersecurity assurance is a key delivery objective for CCAV New Standards will be required: KPMG s report for the SMMT: standards for cybersecurity will need to be created to define the minimum security embedded in the hardware; as well as what the boundaries are for software and connectivity. This may be included within the current Type Approvals and ISO frameworks. US standard SAEJ3061 (2016) provides and describes a cybersecurity process framework from which an organization can develop an internal cybersecurity process to design and build cybersecurity in to vehicle systems.

7 Collision avoidance AEB

8 The Autonomous Car Timeline International Categorisation of Autonomy 0 No Automation 1 Assisted 2 Partial Automation Driver attention 3 Conditional Automation 4 High Automation 5 Full Automation 0: Lane Departure Warning, Electronic Stability Control (System functionality improvements) 1:Adaptive Cruise Control, Lane Keep Assitance, Blind Spot Warning, Autonomous Emergency Braking 2: (2014 on) Queue Assist, Parking Assistance 3: (2018? on) Super Cruise 4: (2020 on) Automated Driving 5: (2025) Robot Taxi Feet Off Hands Off Eyes Off Brain Off? Driver monitors driving environment Now? Driver monitored System monitors driving environment

9 Volvo Drive Me Level 3/4? First large scale trials of production ready Automated Driving Test route around Gothenburg ring road including junctions, traffic signals and merging Complex network of sensors, cloud based positioning systems and intelligent braking and steering technologies 2017: trials with 100 customers driving Production cars available 2018/20 level 3/4

10 Risk quantification Insurers role is to provide risk management to society for a profit. Insurers need to understand risk to ensure theycanremainprofitableortheywillnot be able to provide this (Thatcham provides the UK s Group Rating assessments on the relative risk of new models). The transition from driver control to vehicle control will require better risk assessment better information. If we want the benefits that driverless cars could bring insurers will need to be givengoodinformation ortheywon t be able to play their role.

11 Automated Driving Good for Insurers? How will drivers understand and use these systems? Level 2, Level 3 or Level 4? Is the driver required or not? What will regulations allow ECE R79 ACSF Will data of AD use be recorded? Insurer Response: Automated Driving Insurance Group (ADIG) Thatcham/ABI and Insurers Claim of the Future modelling the future risks Future proofing Group Rating to accommodate Automated Driving functionality

12 Tesla and Infiniti Autopilots Level 2or 3 or even 4? Tesla Model S Infiniti Q50

13 Automation From Assistance to Automated Driving Assisted systems that support the driver with steering, acceleration and braking either separately or in combination but where the driver is ultimately in control and clearly responsible. E.g. Highway Cruise Plus systems 2018 Automated (Restricted) systems that can take full control of the driving task for parts of a journey under restricted conditions E.g. Geo fenced Motorways 2021 Automated (Full) systems that can control the vehicle for the entire journey from door to door only requiring the operator to specify a journey Full set of road types without restriction Such a vehicle may or may not have controls to allow manual operation 2025

14 Where are the current risks? Road Classes High mileage Low fatalities & casualties 22% of mileage 4.8% of injuries All casualties = severe and slight injuries (DfT); closest comparison is all personal injury claims Source: Stats19, UK DfT

15 Roke s Security Model for Machine Situational Awareness

16 Cybersecurity unknown unknowns D. Rumsfeld A increasingly complex attack surface A rapidly autonomising fleet Threat to life An iceberg waiting for us. Action required!

17 Examining future priorities for cyber security management Cybersecurity Focus Day Insurance Telematics 16 Andrew Miller Chief Technical Officer